# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=189

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 190

---

## [Automate SLM](https://discuss.elastic.co/t/automate-slm/364683)

<div class="topic-metadata">

**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\
**Replies:** 0\
**Last updated:** [August 9, 2024, 1:52pm UTC](https://discuss.elastic.co/t/automate-slm/364683 "2024-08-09T13:52:02Z")

</div>

Hi Teams We can take backup of daily indices using SLM. Till now we were doing this manually, like daily-backup-2024-08-01 snapshot is taking backup of indices 2024-08-01, daily-backup-2024-08-02 snapshot is taking back…

---

## [Filebeat not connecting to logstash server with no error logs](https://discuss.elastic.co/t/filebeat-not-connecting-to-logstash-server-with-no-error-logs/364653)

<div class="topic-metadata">

**Author:** [@Houss](https://discuss.elastic.co/u/Houss)\
**Replies:** 9\
**Last updated:** [August 9, 2024, 1:37pm UTC](https://discuss.elastic.co/t/filebeat-not-connecting-to-logstash-server-with-no-error-logs/364653 "2024-08-09T13:37:49Z")

</div>

Hi, I know the title will sound generic but I'm facing a new problem I've never encountered in the past. I have a filebeat installed on an exchange server, and everything works fine : filebeat establish a connection to…

---

## [Completion suggester failed: org.elasticsearch.common.io.stream.NotSerializableExceptionWrapper: no\_such\_element\_exception: null](https://discuss.elastic.co/t/completion-suggester-failed-org-elasticsearch-common-io-stream-notserializableexceptionwrapper-no-such-element-exception-null/364671)

<div class="topic-metadata">

**Author:** [@hanbj](https://discuss.elastic.co/u/hanbj)\
**Replies:** 0\
**Last updated:** [August 9, 2024, 12:19pm UTC](https://discuss.elastic.co/t/completion-suggester-failed-org-elasticsearch-common-io-stream-notserializableexceptionwrapper-no-such-element-exception-null/364671 "2024-08-09T12:19:27Z")

</div>

Elasticsearch version: 6.8.2 completion field mapping： "query": { "type": "completion", "analyzer": "standard", "preserve\_separators": true, "preserve\_position\_increment…

---

## [Add second Node to Cluster (Windows)](https://discuss.elastic.co/t/add-second-node-to-cluster-windows/364286)

<div class="topic-metadata">

**Author:** [@Shaakxuur](https://discuss.elastic.co/u/Shaakxuur)\
**Replies:** 2\
**Last updated:** [August 9, 2024, 1:08pm UTC](https://discuss.elastic.co/t/add-second-node-to-cluster-windows/364286 "2024-08-09T13:08:48Z")

</div>

Hello I'm stuck at the moment, maybe someone can help me. I am reading through the instructions step by step and am trying to recreate this on my Windows system. https://www.elastic.co/guide/en/elastic-stack/8.14/inst…

---

## [How does Elastic compare with DuckDB?](https://discuss.elastic.co/t/how-does-elastic-compare-with-duckdb/364660)

<div class="topic-metadata">

**Author:** [@jeanpl](https://discuss.elastic.co/u/jeanpl)\
**Replies:** 1\
**Last updated:** [August 9, 2024, 12:10pm UTC](https://discuss.elastic.co/t/how-does-elastic-compare-with-duckdb/364660 "2024-08-09T12:10:11Z")

</div>

I know that Elastic is still the most downloaded search engine. However, I see some users on Medium trying to replace Elastic by DuckDB ... It is kind of anti-pattern ? Or may be it is relevant approach only for very …

---

## [I controlled my config file tens of times but I got that error anyway](https://discuss.elastic.co/t/i-controlled-my-config-file-tens-of-times-but-i-got-that-error-anyway/364668)

<div class="topic-metadata">

**Author:** [@UMUT\_CAN\_ARGUN](https://discuss.elastic.co/u/UMUT_CAN_ARGUN)\
**Replies:** 2\
**Last updated:** [August 9, 2024, 11:45am UTC](https://discuss.elastic.co/t/i-controlled-my-config-file-tens-of-times-but-i-got-that-error-anyway/364668 "2024-08-09T11:45:59Z")

</div>

Here is my config file: Here is the error:

---

## [\[Filebeat\] Filestream ignore\_inactive setting not working correctly](https://discuss.elastic.co/t/filebeat-filestream-ignore-inactive-setting-not-working-correctly/364669)

<div class="topic-metadata">

**Author:** [@boernd](https://discuss.elastic.co/u/boernd)\
**Replies:** 0\
**Last updated:** [August 9, 2024, 11:33am UTC](https://discuss.elastic.co/t/filebeat-filestream-ignore-inactive-setting-not-working-correctly/364669 "2024-08-09T11:33:04Z")

</div>

We are running Filebeat in Kubernetes in autodiscover mode. When configuring the filestream input type with a new registry data path (so clean state from the beginning) and setting ignore\_inactive to since\_last\_start it …

---

## [Elastic mapping Issue](https://discuss.elastic.co/t/elastic-mapping-issue/364426)

<div class="topic-metadata">

**Author:** [@linux\_admin](https://discuss.elastic.co/u/linux_admin)\
**Replies:** 4\
**Last updated:** [August 9, 2024, 6:25am UTC](https://discuss.elastic.co/t/elastic-mapping-issue/364426 "2024-08-09T06:25:49Z")

</div>

I am using ELK version 8.12.0. I have a field called 'request.querystring.username' and that field has different data types keyword and boolean in different indices. Why the same field has the same different data t…

---

## [Unable to create a fleet server with SSL certificates configured](https://discuss.elastic.co/t/unable-to-create-a-fleet-server-with-ssl-certificates-configured/364610)

<div class="topic-metadata">

**Author:** [@martianzz](https://discuss.elastic.co/u/martianzz)\
**Replies:** 2\
**Last updated:** [August 9, 2024, 4:57am UTC](https://discuss.elastic.co/t/unable-to-create-a-fleet-server-with-ssl-certificates-configured/364610 "2024-08-09T04:57:33Z")

</div>

Unable to create a fleet server with SSL certificates configured. the below error is coming. Please tell why ? ./elastic-agent install --url=https://10.0.30.129:8220 Elastic Agent will be installed at /opt/Elastic/A…

---

## [How Debug custom elasticsearch8.14 plugin in Intellij](https://discuss.elastic.co/t/how-debug-custom-elasticsearch8-14-plugin-in-intellij/364269)

<div class="topic-metadata">

**Author:** [@dean\_winchester](https://discuss.elastic.co/u/dean_winchester)\
**Replies:** 6\
**Last updated:** [August 9, 2024, 3:34am UTC](https://discuss.elastic.co/t/how-debug-custom-elasticsearch8-14-plugin-in-intellij/364269 "2024-08-09T03:34:10Z")

</div>

Hello everyone, I am an elasticsearch developer. Due to business needs, I need to develop a plug-in. The logic of this plug-in is relatively complex. I need the degbug plug-in source code. I can debug the plug-in locally…

---

## [Logstash does not load data into elastic](https://discuss.elastic.co/t/logstash-does-not-load-data-into-elastic/364313)

<div class="topic-metadata">

**Author:** [@peter170805](https://discuss.elastic.co/u/peter170805)\
**Replies:** 10\
**Last updated:** [August 9, 2024, 3:04am UTC](https://discuss.elastic.co/t/logstash-does-not-load-data-into-elastic/364313 "2024-08-09T03:04:17Z")

</div>

Good afternoon friends, I have a question, I have Kibana version 7.5.1, the same as Elastic. I created an index to monitor a weblogic log. Before creating the index I tested the logstash configuration file (v 7.1.1), wh…

---

## [CVE-2021-44832](https://discuss.elastic.co/t/cve-2021-44832/364592)

<div class="topic-metadata">

**Author:** [@nishant\_goyal](https://discuss.elastic.co/u/nishant_goyal)\
**Replies:** 4\
**Last updated:** [August 9, 2024, 12:15am UTC](https://discuss.elastic.co/t/cve-2021-44832/364592 "2024-08-09T00:15:26Z")

</div>

HI I am using Elasticsearch v 7.16.2 version and found CVE-2021-44832 Vurn. Please help me to update jar file Plugin Output: Path : /usr/share/elasticsearch/lib/elasticsearch-log4j-7.16.2.jar Installed …

---

## [ELSER v2 model inference getting stuck while inferencing](https://discuss.elastic.co/t/elser-v2-model-inference-getting-stuck-while-inferencing/364602)

<div class="topic-metadata">

**Author:** [@rakesh\_nayak\_1](https://discuss.elastic.co/u/rakesh_nayak_1)\
**Replies:** 2\
**Last updated:** [August 9, 2024, 12:03am UTC](https://discuss.elastic.co/t/elser-v2-model-inference-getting-stuck-while-inferencing/364602 "2024-08-09T00:03:06Z")

</div>

Hello Team, We need your expert advice on the issue of ELSER v2 inference getting stuck. Elasticsearch version: 8.11.1 ML nodes: 2 Allocations are attached below We have two separate deployment models for query a…

---

## [Implied Wildcard Search](https://discuss.elastic.co/t/implied-wildcard-search/364498)

<div class="topic-metadata">

**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Replies:** 5\
**Last updated:** [August 8, 2024, 10:16pm UTC](https://discuss.elastic.co/t/implied-wildcard-search/364498 "2024-08-08T22:16:02Z")

</div>

When using the search bar, I'd like to have wildcards implied. For example, I have a dataset that has URLs in the url.full field. I'd like to be able to enter in the search bar url.domain: google and it matches on any …

---

## [Kibana - can't see data view in management panel](https://discuss.elastic.co/t/kibana-cant-see-data-view-in-management-panel/364570)

<div class="topic-metadata">

**Author:** [@aidin](https://discuss.elastic.co/u/aidin)\
**Replies:** 2\
**Last updated:** [August 8, 2024, 10:11pm UTC](https://discuss.elastic.co/t/kibana-cant-see-data-view-in-management-panel/364570 "2024-08-08T22:11:02Z")

</div>

I have a self-hosted Kibana, connected to a self-hosted Elasticsearch. Even when I login with the "elastic" user which is a super user, I don't see the "data view" in the "management" page. There's also no "Saved Objects…

---

## [Elasticsearch fscrawler laravel](https://discuss.elastic.co/t/elasticsearch-fscrawler-laravel/364234)

<div class="topic-metadata">

**Author:** [@Yemboaro](https://discuss.elastic.co/u/Yemboaro)\
**Replies:** 1\
**Last updated:** [August 8, 2024, 9:08pm UTC](https://discuss.elastic.co/t/elasticsearch-fscrawler-laravel/364234 "2024-08-08T21:08:36Z")

</div>

Hello elastic community I have a problem I developed a laravel project that I integrated elasticsearch and fscrawler for searching indexed files then I deployed the project on an ubuntu server system with an nginx serv…

---

## [How to restore one index from a multi index snapshot](https://discuss.elastic.co/t/how-to-restore-one-index-from-a-multi-index-snapshot/364608)

<div class="topic-metadata">

**Author:** [@shrm](https://discuss.elastic.co/u/shrm)\
**Replies:** 2\
**Last updated:** [August 8, 2024, 9:04pm UTC](https://discuss.elastic.co/t/how-to-restore-one-index-from-a-multi-index-snapshot/364608 "2024-08-08T21:04:45Z")

</div>

Hi, I have a weekly backup from all of the indexes. I lost one of the indexes and want to restore it but not all of the indexes. I will make the separate index snapshots later. But now I need to restore this index only n…

---

## [Cannot start logstash docker container](https://discuss.elastic.co/t/cannot-start-logstash-docker-container/364525)

<div class="topic-metadata">

**Author:** [@daverodgers](https://discuss.elastic.co/u/daverodgers)\
**Replies:** 2\
**Last updated:** [August 8, 2024, 9:04pm UTC](https://discuss.elastic.co/t/cannot-start-logstash-docker-container/364525 "2024-08-08T21:04:08Z")

</div>

Hi. I am trying to create a new ELK stack using docker compose. My ES and Kibana containers are running fine. However i am having issues with logstash. Originally it was starting using the docker compose file. But the …

---

## [Azure snapshot error: Unable to find client with name \[abc\]](https://discuss.elastic.co/t/azure-snapshot-error-unable-to-find-client-with-name-abc/364231)

<div class="topic-metadata">

**Author:** [@pjd](https://discuss.elastic.co/u/pjd)\
**Replies:** 9\
**Last updated:** [August 8, 2024, 7:45pm UTC](https://discuss.elastic.co/t/azure-snapshot-error-unable-to-find-client-with-name-abc/364231 "2024-08-08T19:45:27Z")

</div>

Running elasticsearch as a kubernetes pod. Here are the steps followed. added keystore entries ./bin/elasticsearch-keystore add azure.client.default.account ./bin/elasticsearch-keystore add azure.client.default.key …

---

## [Incremental sync for Postgres and MySQL connectors](https://discuss.elastic.co/t/incremental-sync-for-postgres-and-mysql-connectors/364609)

<div class="topic-metadata">

**Author:** [@andrej.peplinski](https://discuss.elastic.co/u/andrej.peplinski)\
**Replies:** 3\
**Last updated:** [August 8, 2024, 7:23pm UTC](https://discuss.elastic.co/t/incremental-sync-for-postgres-and-mysql-connectors/364609 "2024-08-08T19:23:53Z")

</div>

Are there any plans to support incremental syncs for Postgres and MySQL database connectors?

---

## [Unable to Apply Configuration Changes Due to Errors \[ Critical Issue\]](https://discuss.elastic.co/t/unable-to-apply-configuration-changes-due-to-errors-critical-issue/364626)

<div class="topic-metadata">

**Author:** [@Raghavendra\_Mendon](https://discuss.elastic.co/u/Raghavendra_Mendon)\
**Replies:** 0\
**Last updated:** [August 8, 2024, 7:13pm UTC](https://discuss.elastic.co/t/unable-to-apply-configuration-changes-due-to-errors-critical-issue/364626 "2024-08-08T19:13:43Z")

</div>

Due to a recent change in index ILM configuration, our hot storage, which is 2GB out of 60GB, has reached 100% capacity. As a result, the Elastic Cloud service is down, and the new configuration changes are not being app…

---

## [Hot Warm Cold - not going to cold?](https://discuss.elastic.co/t/hot-warm-cold-not-going-to-cold/364557)

<div class="topic-metadata">

**Author:** [@learningelastic](https://discuss.elastic.co/u/learningelastic)\
**Replies:** 4\
**Last updated:** [August 8, 2024, 5:20pm UTC](https://discuss.elastic.co/t/hot-warm-cold-not-going-to-cold/364557 "2024-08-08T17:20:38Z")

</div>

I'm learning about ILM and hot warm cold structure. For some reason, my indices aren't going to the cold node OR being deleted. I will show my experiment below and someone tell me what I did wrong? I have 3 nodes and t…

---

## [ILM Policy Error](https://discuss.elastic.co/t/ilm-policy-error/364556)

<div class="topic-metadata">

**Author:** [@linux\_admin](https://discuss.elastic.co/u/linux_admin)\
**Replies:** 8\
**Last updated:** [August 8, 2024, 3:41pm UTC](https://discuss.elastic.co/t/ilm-policy-error/364556 "2024-08-08T15:41:15Z")

</div>

I am using ELK version 8.12.0 for collecting kong logs using kong udp-logs. I am getting the below ILM error for one old index. How to solve it, please? \[2024-08-07T22:14:31,004\]\[WARN \]\[o.e.x.i.ExecuteStepsUpdateTask\] …

---

## [Data for the index is stored in only one shard](https://discuss.elastic.co/t/data-for-the-index-is-stored-in-only-one-shard/364613)

<div class="topic-metadata">

**Author:** [@abhadauria](https://discuss.elastic.co/u/abhadauria)\
**Replies:** 1\
**Last updated:** [August 8, 2024, 2:21pm UTC](https://discuss.elastic.co/t/data-for-the-index-is-stored-in-only-one-shard/364613 "2024-08-08T14:21:04Z")

</div>

I am using ES version 7.17, I have a doubt that my index is having settings that it is associated with 100 shards with replication of 2, however all the data for the index is getting stored in only 1 shard. Please let …

---

## [Requirements for precision tuning to work](https://discuss.elastic.co/t/requirements-for-precision-tuning-to-work/364607)

<div class="topic-metadata">

**Author:** [@tomekred](https://discuss.elastic.co/u/tomekred)\
**Replies:** 0\
**Last updated:** [August 8, 2024, 12:49pm UTC](https://discuss.elastic.co/t/requirements-for-precision-tuning-to-work/364607 "2024-08-08T12:49:49Z")

</div>

Hello All, Recently I've been trying to make App Search working on an existing index (and modifying the mapping accordingly) , but I am not sure if I understand the process correctly. I would be very pleased if you cou…

---

## [Error when adding Windows integration](https://discuss.elastic.co/t/error-when-adding-windows-integration/364188)

<div class="topic-metadata">

**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\
**Replies:** 2\
**Last updated:** [August 8, 2024, 12:10pm UTC](https://discuss.elastic.co/t/error-when-adding-windows-integration/364188 "2024-08-08T12:10:54Z")

</div>

Hello I am trying to setup a Windows integration but I get this error message and I cannot add the Elastic Agent: Error installing windows 1.47.0: mapper\_parsing\_exception Caused by: illegal\_argument\_exception: analyze…

---

## ["Forbidden" error when saving Dashboards](https://discuss.elastic.co/t/forbidden-error-when-saving-dashboards/364542)

<div class="topic-metadata">

**Author:** [@Jose\_E](https://discuss.elastic.co/u/Jose_E)\
**Replies:** 2\
**Last updated:** [August 8, 2024, 11:59am UTC](https://discuss.elastic.co/t/forbidden-error-when-saving-dashboards/364542 "2024-08-08T11:59:19Z")

</div>

Hi there, I'm having a weird issue where Kibana reports "Error: Forbidden" when trying to save a Dashboard. My logs in Kibana are looking like this: {"type":"log","@timestamp":"2024-08-07T13:23:47+00:00","tags":\["err…

---

## [ElasticSearch services Failed because none of the ciphers......are supported by this JVM](https://discuss.elastic.co/t/elasticsearch-services-failed-because-none-of-the-ciphers-are-supported-by-this-jvm/364534)

<div class="topic-metadata">

**Author:** [@william13110](https://discuss.elastic.co/u/william13110)\
**Replies:** 7\
**Last updated:** [August 8, 2024, 11:47am UTC](https://discuss.elastic.co/t/elasticsearch-services-failed-because-none-of-the-ciphers-are-supported-by-this-jvm/364534 "2024-08-08T11:47:56Z")

</div>

\[2024-08-07T16:03:33,738\]\[ERROR\]\[o.e.b.Bootstrap \] \[idrive-AP-srv\] Exception java.lang.IllegalStateException: failed to load plugin class \[org.elasticsearch.xpack.core.XPackPlugin\] at org.elasticsearch.plugins.…

---

## [Help with filter to create field from substring](https://discuss.elastic.co/t/help-with-filter-to-create-field-from-substring/364568)

<div class="topic-metadata">

**Author:** [@Big-Edd](https://discuss.elastic.co/u/Big-Edd)\
**Replies:** 2\
**Last updated:** [August 8, 2024, 11:05am UTC](https://discuss.elastic.co/t/help-with-filter-to-create-field-from-substring/364568 "2024-08-08T11:05:42Z")

</div>

Hello Everyone, We are inputting RabbitMQ messages that originates via SMTP, so the messages contain some SMTP information we need. The logstash.conf file I have so far looks something like this. input { rabbitmq { …

---

## [Update field meta of dynamic object in mappings using NEST](https://discuss.elastic.co/t/update-field-meta-of-dynamic-object-in-mappings-using-nest/364594)

<div class="topic-metadata">

**Author:** [@rdmzcn](https://discuss.elastic.co/u/rdmzcn)\
**Replies:** 0\
**Last updated:** [August 8, 2024, 10:26am UTC](https://discuss.elastic.co/t/update-field-meta-of-dynamic-object-in-mappings-using-nest/364594 "2024-08-08T10:26:35Z")

</div>

Hello everyone, I have a nested field with dynamic=true as below. I keep the tr/en localizations of the fields in meta. How can I change the meta when adding a new field due to dynamic mapping in a new insert request? {…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=188)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=190)
